CyStack Security

“From Password to Passwordless” - Igniting innovation of passwordless authentication at FIDO APAC Summit 2023! 🇻🇳

CyStack marked its impactful presence on the second day of the FIDO APAC Summit 2023 with a presentation called “From Password to Passwordless” from our CEO and Founder Mr. Trung Nguyen.

Mr. Trung highlighted the role of password managers in the journey from password-based to passwordless authentication and outlined the view of a future of strong passwordless authentication from the perspective of a cybersecurity expert with many years of experience. Thereby, Mr. Trung proposed impressive ideas and successfully closed the second day of the event.

CyStack had the opportunity to meet, communicate and exchange with leading experts of cybersecurity in the region. We have gained many new perspectives, which is a valuable preparation for the development of CyStack in the future.

Sincere thanks to FIDO Alliance and VinCSS for organizing such a meaningful event. Thanks to all the attendees, guest speakers and journalists who made this event a resounding success. Together, we have mapped out the next steps in shaping a promising digital future.

Over the past week, CyStack has worked with ONUS on incident responses to a cyberattack that affected nearly 2 million users of the platform. The following post will describe and analyze in detail what happened to ONUS.

English version: https://cystack.net/research/the-attack-on-onus-a-real-life-case-of-the-log4shell-vulnerability
Vietnamese version: https://cystack.net/research/cuoc-tan-cong-vao-onus-goc-nhin-ky-thuat-tu-lo-hong-log4shell

The attack on ONUS – A real-life case of the Log4Shell vulnerability | CyStack Security Đọc bản tiếng Việt tại đây Log4Shell has recently been a nightmare (probably the worst one for now) to businesses. ONUS, a client of ours, was an unfortunate victim. As their security partner, CyStack informed ONUS of the risks right after Log4Shell came to light; when the attack actual...

CyStack has released a plugin for detecting the vulnerability (aka. CVE-2021-44228). Scan now at https://web.cystack.net

We also offer https://dnsbin.net as a DNS logging tool for researchers who are hunting this flaw.

CyStack Web Security CyStack Web Security - Security scanning and monitoring tool for websites, web applications, servers and APIs. Detect OWASP Top 10 security vulnerabilities, known, CVE, and zero-day vulnerabilities, infrastructure misconfigurations, and subdomain takeovers vulnerabilities. Get 1 free scan for your w...